docker.io/inrgihc/dbswitch:1.9.7 linux/amd64

docker.io/inrgihc/dbswitch:1.9.7 - Trivy安全扫描结果 扫描时间: 2026-09-21 12:27
全部漏洞信息
低危漏洞:119 中危漏洞:194 高危漏洞:121 严重漏洞:28

系统OS: alpine 3.9.4 扫描引擎: Trivy 扫描时间: 2026-09-21 12:27

docker.io/inrgihc/dbswitch:1.9.7 (alpine 3.9.4) (alpine)
低危漏洞:94 中危漏洞:90 高危漏洞:27 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
freetype CVE-2020-15999 严重 2.9.1-r2 2.9.1-r3 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15999

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-11-03 03:15 修改: 2026-06-17 02:57
libbz2 CVE-2019-12900 严重 1.0.6-r6 1.0.6-r7 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
musl CVE-2019-14697 严重 1.1.20-r4 1.1.20-r5 musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14697

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-08-06 16:15 修改: 2026-06-17 02:18
musl-utils CVE-2019-14697 严重 1.1.20-r4 1.1.20-r5 musl libc through 1.1.23 has an x87 floating-point stack adjustment im ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14697

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-08-06 16:15 修改: 2026-06-17 02:18
sqlite-libs CVE-2019-8457 严重 3.26.0-r3 3.28.0-r0 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libcrypto1.1 CVE-2021-3450 高危 1.1.1b-r1 1.1.1k-r0 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libjpeg-turbo CVE-2019-2201 高危 1.5.3-r4 1.5.3-r6 libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2201

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-11-13 18:15 修改: 2026-06-17 02:33
libssl1.1 CVE-2020-1967 高危 1.1.1b-r1 1.1.1g-r0 openssl: Segmentation fault in SSL_check_chain causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1967

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2020-04-21 14:15 修改: 2026-06-17 03:02
libssl1.1 CVE-2021-23840 高危 1.1.1b-r1 1.1.1j-r0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1 CVE-2021-3450 高危 1.1.1b-r1 1.1.1k-r0 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libx11 CVE-2020-14363 高危 1.6.7-r0 1.6.12-r0 libX11: integer overflow leads to double free in locale handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14363

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-09-11 18:15 修改: 2026-06-17 02:54
krb5-libs CVE-2020-28196 高危 1.15.5-r0 1.15.5-r1 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
libcrypto1.1 CVE-2020-1967 高危 1.1.1b-r1 1.1.1g-r0 openssl: Segmentation fault in SSL_check_chain causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1967

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2020-04-21 14:15 修改: 2026-06-17 03:02
openjdk8-jre CVE-2020-14583 高危 8.212.04-r0 8.272.10-r0 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14593 高危 8.212.04-r0 8.272.10-r0 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-2604 高危 8.212.04-r0 8.242.08-r0 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2803 高危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2805 高危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-14583 高危 8.212.04-r0 8.272.10-r0 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14593 高危 8.212.04-r0 8.272.10-r0 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-2604 高危 8.212.04-r0 8.242.08-r0 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2803 高危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2805 高危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-14583 高危 8.212.04-r0 8.272.10-r0 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14593 高危 8.212.04-r0 8.272.10-r0 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-2604 高危 8.212.04-r0 8.242.08-r0 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2803 高危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2805 高危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
libcrypto1.1 CVE-2021-23840 高危 1.1.1b-r1 1.1.1j-r0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
sqlite-libs CVE-2019-19244 高危 3.26.0-r3 3.28.0-r2 sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19244

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-11-25 20:15 修改: 2026-06-17 02:26
sqlite-libs CVE-2019-5018 高危 3.26.0-r3 3.28.0-r0 sqlite: Use-after-free in window function leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5018

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-05-10 19:29 修改: 2026-06-17 02:36
sqlite-libs CVE-2020-11655 高危 3.26.0-r3 3.28.0-r3 sqlite: malformed window-function query leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11655

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-09 03:15 修改: 2026-06-17 02:50
libcrypto1.1 CVE-2021-3449 中危 1.1.1b-r1 1.1.1k-r0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libcom_err CVE-2019-5188 中危 1.44.5-r0 1.44.5-r2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
libjpeg-turbo CVE-2018-14498 中危 1.5.3-r4 1.5.3-r5 libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14498

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-03-07 23:29 修改: 2026-06-17 01:41
libcom_err CVE-2019-5094 中危 1.44.5-r0 1.44.5-r1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libcrypto1.1 CVE-2019-1547 中危 1.1.1b-r1 1.1.1d-r0 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openjdk8-jre CVE-2019-2745 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2762 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2769 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2816 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Missing URL format validation (Networking, 8221518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2949 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2958 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2958

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2975 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2989 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre CVE-2019-2999 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre CVE-2019-7317 中危 8.212.04-r0 8.222.10-r0 libpng: use-after-free in png_image_free in png.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40
openjdk8-jre CVE-2020-14556 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre CVE-2020-14621 中危 8.212.04-r0 8.272.10-r0 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14779 中危 8.212.04-r0 8.272.10-r0 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14781 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14782 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14792 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14797 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14803 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-2593 中危 8.212.04-r0 8.242.08-r0 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2601 中危 8.212.04-r0 8.242.08-r0 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2781 中危 8.212.04-r0 8.252.09-r0 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2800 中危 8.212.04-r0 8.252.09-r0 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2830 中危 8.212.04-r0 8.252.09-r0 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13
libcrypto1.1 CVE-2019-1549 中危 1.1.1b-r1 1.1.1d-r0 openssl: information disclosure in fork()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1549

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1 CVE-2019-1547 中危 1.1.1b-r1 1.1.1d-r0 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1 CVE-2019-1549 中危 1.1.1b-r1 1.1.1d-r0 openssl: information disclosure in fork()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1549

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1 CVE-2019-1551 中危 1.1.1b-r1 1.1.1d-r2 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
libssl1.1 CVE-2020-1971 中危 1.1.1b-r1 1.1.1i-r0 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
openjdk8-jre-base CVE-2019-2745 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2762 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2769 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2816 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Missing URL format validation (Networking, 8221518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2949 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2958 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2958

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2975 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2989 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-base CVE-2019-2999 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-base CVE-2019-7317 中危 8.212.04-r0 8.222.10-r0 libpng: use-after-free in png_image_free in png.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40
openjdk8-jre-base CVE-2020-14556 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre-base CVE-2020-14621 中危 8.212.04-r0 8.272.10-r0 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14779 中危 8.212.04-r0 8.272.10-r0 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14781 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14782 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14792 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14797 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14803 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-2593 中危 8.212.04-r0 8.242.08-r0 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2601 中危 8.212.04-r0 8.242.08-r0 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2781 中危 8.212.04-r0 8.252.09-r0 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2800 中危 8.212.04-r0 8.252.09-r0 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2830 中危 8.212.04-r0 8.252.09-r0 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13
libssl1.1 CVE-2021-23841 中危 1.1.1b-r1 1.1.1j-r0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1 CVE-2021-3449 中危 1.1.1b-r1 1.1.1k-r0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libtasn1 CVE-2018-1000654 中危 4.13-r0 4.14-r0 libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000654

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2018-08-20 19:31 修改: 2026-06-17 01:33
libcrypto1.1 CVE-2019-1551 中危 1.1.1b-r1 1.1.1d-r2 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
libx11 CVE-2020-14344 中危 1.6.7-r0 1.6.10-r0 libX11: Heap overflow in the X input method client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14344

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-08-05 14:15 修改: 2026-06-17 02:54
openjdk8-jre-lib CVE-2019-2745 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2762 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2769 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2816 中危 8.212.04-r0 8.222.10-r0 OpenJDK: Missing URL format validation (Networking, 8221518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2949 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2958 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2958

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2975 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2989 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-lib CVE-2019-2999 中危 8.212.04-r0 8.232.09-r0 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-lib CVE-2019-7317 中危 8.212.04-r0 8.222.10-r0 libpng: use-after-free in png_image_free in png.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40
openjdk8-jre-lib CVE-2020-14556 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre-lib CVE-2020-14621 中危 8.212.04-r0 8.272.10-r0 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14779 中危 8.212.04-r0 8.272.10-r0 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14781 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14782 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14792 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14797 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14803 中危 8.212.04-r0 8.272.10-r0 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-2593 中危 8.212.04-r0 8.242.08-r0 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2601 中危 8.212.04-r0 8.242.08-r0 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2781 中危 8.212.04-r0 8.252.09-r0 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2800 中危 8.212.04-r0 8.252.09-r0 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2830 中危 8.212.04-r0 8.252.09-r0 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13
libcrypto1.1 CVE-2020-1971 中危 1.1.1b-r1 1.1.1i-r0 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
musl CVE-2020-28928 中危 1.1.20-r4 1.1.20-r6 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
libcrypto1.1 CVE-2021-23841 中危 1.1.1b-r1 1.1.1j-r0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
musl-utils CVE-2020-28928 中危 1.1.20-r4 1.1.20-r6 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
sqlite-libs CVE-2019-16168 中危 3.26.0-r3 3.28.0-r1 sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16168

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-09-09 17:15 修改: 2026-06-17 02:21
sqlite-libs CVE-2019-19242 中危 3.26.0-r3 3.28.0-r2 sqlite: SQL injection in sqlite3ExprCodeTarget in expr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19242

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-11-27 17:15 修改: 2026-06-17 02:26
openjdk8-jre-base CVE-2019-2766 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2766

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2786 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2842 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2894 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2933 低危 8.212.04-r0 8.232.09-r0 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2933

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2945 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2962 低危 8.212.04-r0 8.232.09-r0 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2964 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2973 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2978 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2981 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2983 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2987 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2988 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base CVE-2019-2992 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-base CVE-2020-14577 低危 8.212.04-r0 8.272.10-r0 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14578 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14579 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14581 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14796 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14798 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-2583 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2590 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2654 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2659 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2754 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2755 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2756 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2757 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base CVE-2020-2773 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2659 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2754 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2755 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2756 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2757 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2773 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
libssl1.1 CVE-2021-23839 低危 1.1.1b-r1 1.1.1j-r0 openssl: incorrect SSLv2 rollback protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1 CVE-2021-23839 低危 1.1.1b-r1 1.1.1j-r0 openssl: incorrect SSLv2 rollback protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1 CVE-2019-1563 低危 1.1.1b-r1 1.1.1d-r0 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1 CVE-2019-1563 低危 1.1.1b-r1 1.1.1d-r0 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openjdk8-jre CVE-2019-2766 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2766

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2786 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2842 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2894 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2933 低危 8.212.04-r0 8.232.09-r0 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2933

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2945 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2962 低危 8.212.04-r0 8.232.09-r0 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2964 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2973 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2978 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2981 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2983 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2987 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2988 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre CVE-2019-2992 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre CVE-2020-14577 低危 8.212.04-r0 8.272.10-r0 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14578 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14579 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2019-2766 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2766

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2786 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2842 低危 8.212.04-r0 8.222.10-r0 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2894 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2933 低危 8.212.04-r0 8.232.09-r0 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2933

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2945 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2962 低危 8.212.04-r0 8.232.09-r0 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2964 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2973 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2978 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2981 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2983 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2987 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2988 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib CVE-2019-2992 低危 8.212.04-r0 8.232.09-r0 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-lib CVE-2020-14577 低危 8.212.04-r0 8.272.10-r0 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14578 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14579 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14581 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14796 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14798 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-2583 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2590 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2654 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2659 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2754 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2755 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2756 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2757 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib CVE-2020-2773 低危 8.212.04-r0 8.252.09-r0 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-14581 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14796 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14798 低危 8.212.04-r0 8.272.10-r0 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-2583 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2590 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre CVE-2020-2654 低危 8.212.04-r0 8.242.08-r0 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654

镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
Java (jar)
低危漏洞:25 中危漏洞:104 高危漏洞:94 严重漏洞:23
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
cn.hutool:hutool-all CVE-2023-24162 严重 5.7.5 Dromara Hutool Deserialization of Untrusted Data vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24162

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38
cn.hutool:hutool-all CVE-2023-24163 严重 5.7.5 5.8.21 Dromara hutool vulnerable to SQL Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24163

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38
com.github.pagehelper:pagehelper CVE-2022-28111 严重 5.3.0 5.3.1 MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28111

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-05-04 13:15 修改: 2026-06-17 04:38
com.nimbusds:nimbus-jose-jwt CVE-2019-17195 严重 4.41.1 7.9 nimbus-jose-jwt: Uncaught exceptions while parsing a JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-10-15 14:15 修改: 2026-06-17 02:23
org.apache.logging.log4j:log4j-core CVE-2017-5645 严重 2.7 2.8.2 log4j: Socket receiver deserialization vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5645

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2017-04-17 21:59 修改: 2026-06-17 01:20
org.apache.logging.log4j:log4j-core CVE-2021-44228 严重 2.7 2.15.0, 2.3.1, 2.12.2 log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44228

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-12-10 10:15 修改: 2026-08-11 19:33
org.apache.logging.log4j:log4j-core CVE-2021-45046 严重 2.7 2.16.0, 2.12.2 log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45046

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-12-14 19:15 修改: 2026-06-17 04:13
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 9.0.41 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65182 严重 9.0.41 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65905 严重 9.0.41 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-68525 严重 9.0.41 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
org.eclipse.jetty:jetty-server CVE-2017-7657 严重 9.3.20.v20170531 9.2.25.v20180606, 9.3.24.v20180605 jetty: HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7657

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-06-26 16:29 修改: 2026-06-17 01:24
org.eclipse.jetty:jetty-server CVE-2017-7658 严重 9.3.20.v20170531 9.2.25.v20180606, 9.3.24.v20180605, 9.4.11.v20180605 jetty: Incorrect header handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7658

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-06-26 17:29 修改: 2026-06-17 01:24
org.postgresql:postgresql CVE-2024-1597 严重 42.2.18 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04
org.postgresql:postgresql CVE-2024-1597 严重 42.2.18 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04
org.postgresql:postgresql CVE-2024-1597 严重 42.2.5 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04
org.springframework.boot:spring-boot-starter-web CVE-2022-22965 严重 2.3.7.RELEASE 2.5.12, 2.6.6 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-beans CVE-2022-22965 严重 5.2.12.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-web CVE-2016-1000027 严重 5.2.12.RELEASE 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
org.springframework:spring-webmvc CVE-2022-22965 严重 5.2.12.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
com.nimbusds:nimbus-jose-jwt CVE-2023-52428 高危 4.41.1 9.37.2 nimbus-jose-jwt: large JWE p2c header value causes Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
commons-io:commons-io CVE-2024-47554 高危 2.11.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
dnsjava:dnsjava CVE-2024-25638 高危 2.1.7 3.6.0 dnsjava: Improper response validation allowing DNSSEC bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
mysql:mysql-connector-java CVE-2018-3258 高危 5.1.41 8.0.13 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3258

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57
mysql:mysql-connector-java CVE-2023-22102 高危 5.1.41 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
mysql:mysql-connector-java CVE-2018-3258 高危 5.1.47 8.0.13 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3258

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57
mysql:mysql-connector-java CVE-2023-22102 高危 5.1.47 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
mysql:mysql-connector-java CVE-2023-22102 高危 8.0.17 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
mysql:mysql-connector-java CVE-2023-22102 高危 8.0.17 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
net.minidev:json-smart CVE-2023-1370 高危 2.3 2.4.9 json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart CVE-2023-1370 高危 2.3 2.4.9 json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
org.apache.commons:commons-compress CVE-2021-35515 高危 1.19 1.21 apache-commons-compress: infinite loop when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-35516 高危 1.19 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-35517 高危 1.19 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-36090 高危 1.19 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:58
org.apache.hive:hive-service CVE-2024-23945 高危 3.1.2 4.0.0 Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23945

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-12-23 16:15 修改: 2026-06-17 07:13
com.cedarsoftware:json-io CVE-2023-34610 高危 2.5.1 4.14.1 json-io: cyclic dependencies in a crafted object could result in Dos

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34610

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-14 14:15 修改: 2026-06-17 06:03
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.11.3 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.11.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
org.apache.logging.log4j:log4j-core CVE-2021-45105 高危 2.7 2.12.3, 2.17.0, 2.3.1 log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45105

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-12-18 12:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.13.3 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.13.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.11.3 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.11.3 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.11.3 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.11.3 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.11.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25122 高危 9.0.41 10.0.2, 9.0.43, 8.5.63 tomcat: Request mix-up with h2c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-03-01 12:15 修改: 2026-08-25 16:28
org.apache.tomcat.embed:tomcat-embed-core CVE-2022-42252 高危 9.0.41 8.5.83, 9.0.68, 10.0.27, 10.1.1 tomcat: request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04
org.apache.tomcat.embed:tomcat-embed-core CVE-2022-45143 高危 9.0.41 8.5.84, 9.0.69, 10.1.2 tomcat: JsonErrorReportValve injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45143

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-01-03 19:15 修改: 2026-06-17 05:09
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-24998 高危 9.0.41 10.1.5, 11.0.0-M5, 8.5.88, 9.0.71 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 9.0.41 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 9.0.41 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-38286 高危 9.0.41 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Denial of Service in Tomcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 9.0.41 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-56337 高危 9.0.41 11.0.2, 10.1.34, 9.0.98 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 9.0.41 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989 高危 9.0.41 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 9.0.41 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 9.0.41 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 9.0.41 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 9.0.41 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34483 高危 9.0.41 9.0.116, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34487 高危 9.0.41 9.0.117, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34487

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.11.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.13.3 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
org.eclipse.jetty:jetty-server CVE-2017-7656 高危 9.3.20.v20170531 9.3.24.v20180605, 9.4.11.v20180605 jetty: HTTP request smuggling using the range header

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7656

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-06-26 15:29 修改: 2026-06-17 01:24
org.eclipse.jetty:jetty-server CVE-2018-12545 高危 9.3.20.v20170531 9.4.12.v20180830, 9.3.25.v20180904 jetty: large settings frames causing denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12545

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-03-27 20:29 修改: 2026-06-17 01:37
org.eclipse.jetty:jetty-server CVE-2021-28165 高危 9.3.20.v20170531 9.4.39, 10.0.2, 11.0.2 jetty: Resource exhaustion when receiving an invalid large TLS frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-04-01 15:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-webapp CVE-2020-27216 高危 9.3.20.v20170531 9.4.33.v20201020, 10.0.0.beta3, 11.0.0.beta3 jetty: local temporary directory hijacking vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27216

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-10-23 13:15 修改: 2026-06-17 03:08
org.lz4:lz4-java CVE-2025-12183 高危 1.7.1 1.8.1 lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java CVE-2025-66566 高危 1.7.1 lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.13.3 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.13.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.postgresql:postgresql CVE-2022-21724 高危 42.2.18 42.2.25, 42.3.2 jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21724

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-02-02 12:15 修改: 2026-06-17 04:26
org.postgresql:postgresql CVE-2022-21724 高危 42.2.18 42.2.25, 42.3.2 jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21724

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-02-02 12:15 修改: 2026-06-17 04:26
org.postgresql:postgresql CVE-2022-31197 高危 42.2.18 42.2.26, 42.4.1, 42.3.7 postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-08-03 19:15 修改: 2026-06-17 04:45
org.postgresql:postgresql CVE-2022-31197 高危 42.2.18 42.2.26, 42.4.1, 42.3.7 postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-08-03 19:15 修改: 2026-06-17 04:45
org.postgresql:postgresql CVE-2026-42198 高危 42.2.18 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-29 16:16 修改: 2026-09-11 13:17
org.postgresql:postgresql CVE-2026-42198 高危 42.2.18 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-29 16:16 修改: 2026-09-11 13:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.13.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
org.postgresql:postgresql CVE-2020-13692 高危 42.2.5 42.2.13 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13692

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-06-04 16:15 修改: 2026-06-17 02:53
org.postgresql:postgresql CVE-2022-21724 高危 42.2.5 42.2.25, 42.3.2 jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21724

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-02-02 12:15 修改: 2026-06-17 04:26
org.postgresql:postgresql CVE-2022-31197 高危 42.2.5 42.2.26, 42.4.1, 42.3.7 postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-08-03 19:15 修改: 2026-06-17 04:45
org.postgresql:postgresql CVE-2026-42198 高危 42.2.5 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-29 16:16 修改: 2026-09-11 13:17
org.springframework.boot:spring-boot CVE-2025-22235 高危 2.3.7.RELEASE 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot CVE-2026-40973 高危 2.3.7.RELEASE 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.3.7.RELEASE 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31
ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
org.springframework.data:spring-data-commons CVE-2026-41716 高危 2.3.6.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
com.google.code.gson:gson CVE-2022-25647 高危 2.6.2 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33
org.springframework:spring-beans CVE-2022-22970 高危 5.2.12.RELEASE 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29
org.springframework:spring-context CVE-2022-22968 高危 5.2.12.RELEASE 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29
org.springframework:spring-expression CVE-2023-20863 高危 5.2.12.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31
org.springframework:spring-expression CVE-2026-41849 高危 5.2.12.RELEASE spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-expression CVE-2026-41850 高危 5.2.12.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.mchange:mchange-commons-java CVE-2026-27727 高危 0.2.15 0.4.0 com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27727

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-02-25 17:25 修改: 2026-08-17 12:17
org.springframework:spring-web CVE-2021-22118 高危 5.2.12.RELEASE 5.2.15, 5.3.7 spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22118

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-05-27 15:15 修改: 2026-06-17 03:36
org.springframework:spring-web CVE-2024-22243 高危 5.2.12.RELEASE 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web CVE-2024-22259 高危 5.2.12.RELEASE 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web CVE-2024-22262 高危 5.2.12.RELEASE 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
com.mchange:mchange-commons-java CVE-2026-55153 高危 0.2.15 0.6.0 com.mchange/mchange-commons-java: mchange-commons-java: Remote code execution via JNDI injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55153

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-07-01 21:17 修改: 2026-07-06 15:16
org.springframework:spring-webmvc CVE-2024-38819 高危 5.2.12.RELEASE 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc CVE-2026-41842 高危 5.2.12.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 5.2.12.RELEASE 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.xerial.snappy:snappy-java CVE-2023-34455 高危 1.0.5.4 1.1.10.1 snappy-java: Unchecked chunk length leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-43642 高危 1.0.5.4 1.1.10.4 snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
org.xerial:sqlite-jdbc CVE-2023-32697 高危 3.31.1 3.41.2.2 sqlite-jdbc: Remote code execution when JDBC url is attacker controlled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32697

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-05-23 23:15 修改: 2026-06-17 05:59
org.yaml:snakeyaml CVE-2022-1471 高危 1.26 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml CVE-2022-25857 高危 1.26 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
com.google.guava:guava CVE-2018-10237 中危 23.0 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 9.0.41 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 9.0.41 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 9.0.41 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 9.0.41 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-21733 中危 9.0.41 8.5.64, 9.0.44 tomcat: Leaking of unrelated request bodies in default error page

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 9.0.41 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49124 中危 9.0.41 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 9.0.41 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 9.0.41 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55668 中危 9.0.41 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 9.0.41 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 9.0.41 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 9.0.41 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13
org.eclipse.jetty:jetty-http CVE-2023-40167 中危 9.3.20.v20170531 9.4.52, 10.0.16, 11.0.16, 12.0.1 jetty: Improper validation of HTTP/1 content-length

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.3.20.v20170531 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.google.guava:guava CVE-2023-2976 中危 23.0 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
org.apache.commons:commons-compress CVE-2024-25710 中危 1.19 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16
org.apache.commons:commons-configuration2 CVE-2024-29131 中危 2.1.1 2.10.1 commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2 CVE-2024-29133 中危 2.1.1 2.10.1 commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.2 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.eclipse.jetty:jetty-server CVE-2018-12536 中危 9.3.20.v20170531 9.4.11.v20180605, 9.3.24.v20180605 jetty: full server path revealed when using the default Error Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12536

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-06-27 17:29 修改: 2026-06-17 01:37
org.eclipse.jetty:jetty-server CVE-2019-10241 中危 9.3.20.v20170531 9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411 jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10241

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-04-22 20:29 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server CVE-2019-10246 中危 9.3.20.v20170531 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 jetty: Directory Listing on Windows reveals Resource Base path

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10246

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-04-22 20:29 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server CVE-2019-10247 中危 9.3.20.v20170531 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 jetty: error path information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10247

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-04-22 20:29 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server CVE-2023-26048 中危 9.3.20.v20170531 9.4.51.v20230217, 10.0.14, 11.0.14 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.eclipse.jetty:jetty-server CVE-2024-8184 中危 9.3.20.v20170531 12.0.9, 10.0.24, 11.0.24, 9.4.56 org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:22
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.4 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.glassfish:jakarta.el CVE-2021-28170 中危 3.0.3 3.0.4 jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28170

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-05-26 22:15 修改: 2026-06-17 03:45
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.6 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.hive:hive-llap-common CVE-2024-23953 中危 3.1.2 4.0.0 Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23953

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-01-28 09:15 修改: 2026-06-17 07:13
org.lz4:lz4-java CVE-2026-59949 中危 1.7.1 lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-18 15:16 修改: 2026-09-18 20:09
org.mariadb.jdbc:mariadb-java-client CVE-2026-55856 中危 2.7.1 2.7.14, 3.3.5, 3.4.3, 3.5.9 org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Cleartext password disclosure via man-in-the-middle during initial handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55856

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-28 23:17 修改: 2026-09-08 21:08
org.mariadb.jdbc:mariadb-java-client CVE-2026-55857 中危 2.7.1 2.7.14, 3.3.5, 3.4.3, 3.5.9 org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information Disclosure via Insecure PAM Dialog Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55857

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-28 23:17 修改: 2026-09-08 21:08
org.mariadb.jdbc:mariadb-java-client CVE-2026-55858 中危 2.7.1 2.7.14, 3.3.5, 3.4.3, 3.5.9 org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Silent data corruption due to character set mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55858

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-08-28 23:17 修改: 2026-09-08 21:08
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.11.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.2 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.2 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.13.3 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.11.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.3 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.11.3 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 4.41.1 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
org.postgresql:postgresql CVE-2022-41946 中危 42.2.18 42.2.27, 42.3.8, 42.4.3, 42.5.1 postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41946

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-11-23 20:15 修改: 2026-06-17 05:04
org.postgresql:postgresql CVE-2022-41946 中危 42.2.18 42.2.27, 42.3.8, 42.4.3, 42.5.1 postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41946

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-11-23 20:15 修改: 2026-06-17 05:04
org.postgresql:postgresql GHSA-673j-qm5f-xpv8 中危 42.2.18 42.3.3 pgjdbc Arbitrary File Write Vulnerability

漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-02-16 00:08 修改: 2024-01-22 19:35
org.postgresql:postgresql GHSA-673j-qm5f-xpv8 中危 42.2.18 42.3.3 pgjdbc Arbitrary File Write Vulnerability

漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-02-16 00:08 修改: 2024-01-22 19:35
org.apache.logging.log4j:log4j-core CVE-2021-44832 中危 2.7 2.3.2, 2.12.4, 2.17.1 log4j-core: remote code execution via JDBC Appender

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44832

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-12-28 20:15 修改: 2026-06-17 04:12
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.7 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.7 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.poi:poi-ooxml CVE-2025-31672 中危 4.1.2 5.4.0 org.apache.poi/poi-ooxml: Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31672

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-04-09 12:15 修改: 2026-06-17 09:10
com.squareup.okio:okio CVE-2023-3635 中危 1.6.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14
org.postgresql:postgresql CVE-2022-41946 中危 42.2.5 42.2.27, 42.3.8, 42.4.3, 42.5.1 postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41946

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-11-23 20:15 修改: 2026-06-17 05:04
org.postgresql:postgresql GHSA-673j-qm5f-xpv8 中危 42.2.5 42.3.3 pgjdbc Arbitrary File Write Vulnerability

漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-02-16 00:08 修改: 2024-01-22 19:35
ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.3 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
com.clickhouse:clickhouse-jdbc CVE-2024-23689 中危 0.4.2 0.4.6 ClickHouse vulnerable to client certificate password exposure in client exception

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23689

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-01-19 21:15 修改: 2026-07-14 23:17
io.github.classgraph:classgraph CVE-2021-47621 中危 4.8.83 4.8.112 ClassGraph XML External Entity Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-47621

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-06-21 06:15 修改: 2026-06-17 04:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.13.3 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
org.springframework.data:spring-data-commons CVE-2026-41711 中危 2.3.6.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 2.3.6.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-relational CVE-2026-41697 中危 2.0.6.RELEASE 4.0.6, 3.5.12 Spring Data Relational: Spring Data Relational: Information disclosure via improper input escaping in Query By Example

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41697

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-10 00:16 修改: 2026-09-04 19:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.13.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
mysql:mysql-connector-java CVE-2017-3586 中危 5.1.41 5.1.42 mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3586

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2017-04-24 19:59 修改: 2026-06-17 01:18
mysql:mysql-connector-java CVE-2019-2692 中危 5.1.41 8.0.16 mysql-connector-java: privilege escalation in MySQL connector

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2692

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34
org.springframework:spring-context CVE-2024-38820 中危 5.2.12.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.springframework:spring-core CVE-2021-22060 中危 5.2.12.RELEASE 5.3.14, 5.2.19 springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22060

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:36
org.springframework:spring-core CVE-2021-22096 中危 5.2.12.RELEASE 5.3.11, 5.2.18 springframework: malicious input leads to insertion of additional log entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22096

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-10-28 16:15 修改: 2026-06-17 03:36
mysql:mysql-connector-java CVE-2022-21363 中危 5.1.41 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.13.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.woodstox:woodstox-core CVE-2022-40152 中危 5.0.3 6.4.0, 5.4.0 woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.springframework:spring-expression CVE-2022-22950 中危 5.2.12.RELEASE 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-expression CVE-2023-20861 中危 5.2.12.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31
org.springframework:spring-expression CVE-2024-38808 中危 5.2.12.RELEASE 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
org.springframework:spring-expression CVE-2026-41851 中危 5.2.12.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
mysql:mysql-connector-java CVE-2019-2692 中危 5.1.47 8.0.16 mysql-connector-java: privilege escalation in MySQL connector

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2692

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34
mysql:mysql-connector-java CVE-2022-21363 中危 5.1.47 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26
ch.qos.logback:logback-core CVE-2021-42550 中危 1.2.3 1.2.9 logback: remote code execution through JNDI call from within its configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.11.3 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
mysql:mysql-connector-java CVE-2021-2471 中危 8.0.17 8.0.27 mysql-connector-java: unauthorized access to critical

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2471

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:49
org.springframework:spring-web CVE-2024-38809 中危 5.2.12.RELEASE 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web CVE-2024-38820 中危 5.2.12.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
mysql:mysql-connector-java CVE-2021-2471 中危 8.0.17 8.0.27 mysql-connector-java: unauthorized access to critical

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2471

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:49
mysql:mysql-connector-java CVE-2022-21363 中危 8.0.17 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26
mysql:mysql-connector-java CVE-2022-21363 中危 8.0.17 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26
com.google.guava:guava CVE-2018-10237 中危 19.0 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
org.springframework:spring-webmvc CVE-2026-22745 中危 5.2.12.RELEASE 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-41841 中危 5.2.12.RELEASE 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 5.2.12.RELEASE 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 5.2.12.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 5.2.12.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 5.2.12.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.google.guava:guava CVE-2018-10237 中危 19.0 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
net.minidev:json-smart CVE-2021-27568 中危 2.3 1.3.2, 2.4.1, 2.3.1 json-smart: uncaught exception may lead to crash or information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-02-23 02:15 修改: 2026-06-17 03:45
org.xerial.snappy:snappy-java CVE-2023-34453 中危 1.0.5.4 1.1.10.1 snappy-java: Integer overflow in shuffle leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-34454 中危 1.0.5.4 1.1.10.1 snappy-java: Integer overflow in compress leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
net.minidev:json-smart CVE-2021-27568 中危 2.3 1.3.2, 2.4.1, 2.3.1 json-smart: uncaught exception may lead to crash or information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-02-23 02:15 修改: 2026-06-17 03:45
com.google.guava:guava CVE-2023-2976 中危 19.0 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava CVE-2023-2976 中危 19.0 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
org.yaml:snakeyaml CVE-2022-38749 中危 1.26 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-38750 中危 1.26 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-38751 中危 1.26 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-38752 中危 1.26 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-41854 中危 1.26 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
org.eclipse.jetty:jetty-server CVE-2021-34428 低危 9.3.20.v20170531 9.4.41, 10.0.3, 11.0.3 jetty: SessionListener can prevent a session from being invalidated breaking logout

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2021-06-22 15:15 修改: 2026-06-17 03:55
org.eclipse.jetty:jetty-server CVE-2023-26049 低危 9.3.20.v20170531 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
com.google.guava:guava CVE-2020-8908 低危 19.0 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
org.eclipse.jetty:jetty-xml GHSA-58qw-p7qm-5rvh 低危 9.3.20.v20170531 10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823 Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
com.google.guava:guava CVE-2020-8908 低危 19.0 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
org.eclipse.jetty:jetty-http CVE-2022-2047 低危 9.3.20.v20170531 9.4.47, 10.0.10, 11.0.10 jetty-http: improver hostname input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-07-07 21:15 修改: 2026-06-17 04:41
org.postgresql:postgresql CVE-2022-26520 低危 42.2.18 42.3.3 postgresql-jdbc: Arbitrary File Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-03-10 17:47 修改: 2026-06-17 04:35
org.springframework:spring-context CVE-2025-22233 低危 5.2.12.RELEASE 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
org.postgresql:postgresql CVE-2022-26520 低危 42.2.18 42.3.3 postgresql-jdbc: Arbitrary File Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-03-10 17:47 修改: 2026-06-17 04:35
ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.3 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
org.springframework:spring-core CVE-2026-41848 低危 5.2.12.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.logging.log4j:log4j-core CVE-2020-9488 低危 2.7 2.13.2, 2.12.3, 2.3.2 log4j: improper validation of certificate with host mismatch in SMTP appender

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9488

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-04-27 16:15 修改: 2026-06-17 03:28
org.springframework:spring-webmvc CVE-2026-22741 低危 5.2.12.RELEASE 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.3 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
com.google.guava:guava CVE-2020-8908 低危 23.0 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.3 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
org.mariadb.jdbc:mariadb-java-client CVE-2026-61700 低危 2.7.1 2.7.14, 3.3.5, 3.4.3, 3.5.9 MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-61700

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-09-17 16:17 修改: 2026-09-17 16:17
mysql:mysql-connector-java CVE-2017-3589 低危 5.1.41 5.1.42 mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3589

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2017-04-24 19:59 修改: 2026-06-17 01:18
org.postgresql:postgresql CVE-2022-26520 低危 42.2.5 42.3.3 postgresql-jdbc: Arbitrary File Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2022-03-10 17:47 修改: 2026-06-17 04:35
org.springframework:spring-expression CVE-2026-41852 低危 5.2.12.RELEASE 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 9.0.41 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55754 低危 9.0.41 11.0.11, 10.1.45, 9.0.109 org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 9.0.41 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 9.0.41 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.3 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:f1c10329e7915ca346c12c4c89759a3ccd15670b7d5422ca60aac12169a9719a

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×